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AMENDMENTS TO THE CLAIMS 

This listing will replace all prior versions, and listings, of claims in the application: 
Listing of Claims; 

Claim 1 (currently amended): A device for checking a jogical software e ngin e s engine 
for controlling and commanding plants, particularly railway plants, particularly station plants, _a 
plant the device comprising: 

at least a computer with having at least a central processing unit and at least a memory for 
loading and executing programs[[:]]; 

a logical engine for commanding a - the plant particularly a station plant the logical 
engine being load e d or loadable in said- the at least a memory for it s the execution ^ of the logical 
engine, the logical engine providing control and command signals; 

which plant compris e s a plurality of operating units fe r capable of actuating and/o r 
d e t e ction and/or m e asur e m e nt and/or signalling, so call e d wayside equipments , detecting, 
measuring, and signaling, whieh the plurality of operating units ar e being further capable of 
provid e d for receiving command signals and for of transmitting control signals about the 
operating condition of the plant and which the logical softwar e engine reads reading the control 
signals give n provided by the plurality of operating units for actuating and/or d e t e ction and/or 
measurement and/or signalling and it proc e ss e s and processing the command signals of said 
operating units basing on according to an operation protocol of the plant its e lf , 

charact e ris e d in that 

in th e comput e r m e mory wherein a plant softwar e simulation program software is stored in 
the memory. 
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wherein the plant simulation software is designed that-is to be controlled and commanded 
by the control and command logical program is loaded o r logical engine, 

wherein the plant simulation software is loadable and &4s executable by the at least a 
computer its e lf and which , and 

wherein the plant software simulation program r e produc e s e xactly simulates accurately the 
plant structure and the operating modes of the plurality of operating units provided in said plant. 

Claim 2 (currently amended): [[A]] The device according to claim 1 , charact e ris e d in that 
th e simulation of plant structur e and of op e rating units associat e d th e r e to, such as track circuits 
to d e tect th e pr e senc e of th e train, switch points actuators, s ignalling actuators and oth e r 
diff e r e nt units is r e pr e s e nt e d in th e simulation program by wherein the plant simulation 
software comprises Boolean algorithms including variables, and wherein the variables 
associat e d to said algorithms b e ing are univocallv defined to represent the control signals of 
various stat e or op e ration different state and operating conditions of several the plurality of 
operating units a and the command signals for commutating and/o r and maintaining the different 
state ef -and operating conditions of said s e veral the plurality of operating units. 

Claim 3 (currently amended): [[A]]_The device according to claims 1 or 2, charact e ris e d 
m4hat- claim 1 a further comprising means for displaying the an image of plant b e haviour are 
provid e d und e r th e control of th e control and command logical program behavior, wherein the 
means for displaying are controlled by the logical engine as variable lists univocally associated 
to various the plurality of operating units as report files wh e r e in various , and wherein the report 
files list one or more of the plurality of operating units and the associated state [[or]]_and 
command variables are list e d . 

Claim 4 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 
claims, charact e ris e d in that th e claim 1, wherein the plant simulation program software 
comprises means for setting starting operating conditions of the plant and/or e ven anomalous 
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settm g and means for simulating anomalous situations of plant operating units , in order to check 
the reaction of the plant to th e s e conditions the anomalous situations . 

Claim 5 (currently amended): [[A]] The device according to on e or mor e of th e pr e ceding 
claims, charact e ris e d in that to claim 1. 

eaeh -wherein a plant component is one of the plurality of plant operating unit and/or to 
e ach important structural units, a predetermined element of the plant and/or at l e a s t to on e or 
more ar e as a predetermined area of the plant a and/or to or the whole plant A 

wherein each plant component can be univocally associated to a virtual image of th e 
operating unit and/or of th e plant structural e l e ment and/or of th e ar e a or ar e as of th e plant 
and/or of th e whol e plant which ^ 

wherein the virtual image is generated by a graphic program load e d or loadable and/or and 
executable by the -one of the at least a computer of th e d e vic e and which A 

wherein the virtual image is univocally correlated to the logical program for simulating the 
op e rating unit or th e plant structural e l e m e nt or th e ar e a or ar e as of th e plant or th e whol e plant 
engine, 

wherein the graphic program for g e n e rating th e virtual imag e of e ach op e rating unit and/or 
of each area and/or of th e plant b e ing s uch to g e n e rat e is capable of generating several graphic 
aspect conditions of th e op e rating unit of th e area or of th e whol e each plan t component, and 

wherein each of th e m plant component is univocally correlated to a predetermined value of 
a variable variabl e s relevant to the operating condition of the op e rating unit or of th e area or of 
the plant and/or plant component and of a_command variabl e s variable for oommutating or 
maintaining managing the operating state o f the op e rating unit or of th e ar e a or of the plant 
component . 
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Claim 6 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 
claims, charact e ris e d in that claim 5. further comprising a first program for simulating a relay 
operation and a second program for simulating a relay network operation, further comprising 
and graphic programs for representing relays univocallv associated to the first program for 
simulating relay operation and to the second program for simulating relay network operation, 
wherein the operation of the control and command logical program logical engine is further 
represented , in parall e l or alt e rnativ e ly, as b e haviour of th e as an equivalent command hardware 
logic compos e d of comprising a relay networ k, a program for simulating r e lay op e ration and a 
program for simulating r e lay n e twork op e ration b e ing provid e d, as w e ll as graphic programs for 
r e presenting r e lays univocally associat e d to e ach relay simulation program and to r e lay n e twork 
graphic repr e s e ntation program . 

Claim 7 (currently amended): [[A]] The device according to claim 6, charact e ris e d in that 
wherein each relay in the relay network is simulated by a logical program of Boolean type, 
wherein the relay network provides relay and commutation commands, wherein single state 
conditions of r e lays and/o r the relay and commutation commands being - are represented by state 
or- and command variables* and wherein the g raphic programs for representing relays are b emg 
such as to associate s e v e ral relay graphic aspects that are univocally correlated to values 
assumed by said state of - and command variables. 

Claim 8 (currently amended): [[A]] The device according to on e or more of th e pr e c e ding 
claims, characteris e d in that it has claim 6. further comprising means for scheduling and 
configuring images and/e ^and state and command variable lists of virtual operating units 
corresponding to the desired or correct op e ration or operational and state condition of the plant 
in conjunction with a predetermined operation situation, bv providing wherein means are 
provided for checking, directly and visually, a correct operation of the virtual operating units, m 
conjunction with wherein a utomatic check means are further provided bas ing on th e comparison 
betw ee n comparing one or more of a predetermined the nominal images and th e nominal table* 
and a - enlist of desired state and command variables pr e viously sch e dul e d and th e in a virtual 
model of the plant with one or more of an image , a table, and state and command variables r e ally 
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that are actually processed during the operation of the control and command logic J ogicai 
engine with the station plant virtual mod e l , an error message being sent in case of non-identity. 

Claim 9 (currently amended): [[A]] The device according to claim 8, charact e ri se d in that 
it-has further comprising means for displaying graphically and/er - and analytically the- which 
operating unit or units thafc-have assumed a non-correct condition^ and the corresponding state of 
and command variable or variables. 

Claim 10 (currently amended): [[A]] The device according to claims 8 or 9, charact e ris e d 
in-tha t. wherein the automatic check means analys e e v e n are capable of analyzing the simulated 
representation means-of the relay network, indicating which r e lay or relays have not been 
commutated in the correct condition and the corresponding commutation state e^_andcommand 
variables. 

Claim 1 1 (currently amended): [[A]] The device according to one or mor e of th e pr e ceding 
claims charact e rised in that it provides automatic claim 8, further comprising means that corr e ct 
th e control and command logical program basing on th e for automatically correcting the logical 
engine according to possible corrections made by the-_a_user to the state o r and commands 
variables , the state and command variables being manually modified in th e pr e s e nc e o f because 
of a state ef and command error of one or more of a virtual operating unit er^e f and a relay in th e 
within a corresponding command logical circuit form e d by th e plant or network r e lay situated in 
avirtual model of the plant and relay network . 

Claim 12 (currently amended): [[A]] The device according to on e or more of th e prec e ding 

claims, charact e ris e d in that th e claim 8, wherein modification means allow- provide 

modification interventions both of alphanumeric type , which modification interventions are 

executed on report files of state of - and command variables, and aspect interventions for 

graphically modifying the aspect of the- an operating unit or - and the relay , which aspect 

interventions correspond corresponding to the state of said operating unit or - and of said relay, 

wh e r e as analys e and wherein analysis and interpretation means ar e provided which 

analvs eanalyze state or- and command variable values that are manually set to correct the-any 
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wrong values, analys e the oontrol and command logioal program analyze the logical engine, and 
modify the logical engine's code to commute the-anoperating unit er - and a relay 4n- to the 
correct state condition^ when th e op e ration an operating condition occurs with which due to 
which the control and command logical program logical engine had previously generated the-an 
error signal . 

Claim 1 3 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 
claims, characteris e d in that it comprises claim 8, further comprising a Boolean simulation 
program simulating plant operations, further comprising means for associating operating units 
and plant structural elements so to generate of - and t o find areas of the virtual station plant and 
further find t he corresponding parts of the oontrol and command logioal program logical engine 
having tvpioal that have plant structures components that recur in several station a plurality of 
plants, and so as to load and reuse in new plants having equal components both the Boolean 
simulation programs program. aftd-_the_graphic display program s program, and as w e ll as parts of 
control and command logical programs the logical engine in n e w station plants having e qual 
station area s. 

Claim 14 (currently amended): [[A]] The device according to on e or more of the preceding 
claims, charact e ris e d in that it has claim K further comprising means for connecting and 
interfacing with a_validation and certification mews - system that is based on the div e rsity of th e 
program for g e n e rating th e control and command logical program, such as a so call e d Bool e an 
algorithms check e r a system different from the logical engine for generating command and 
control signals . 

Claim 15 (currently amended): [[A]] The device according to claim 14, charact e rised in 
that the Bool e an ch e ck e r wherein the validation and certification system comprises an additional 
program for generating the-contrc! and command logical program g e n e rat e d or m e morized in th e 
Bool e an check e r signals generated and memorized in the validation and certification system, 
whieh - wherein the additional oontrol and command logical program is generated through means 
different than the one during th e t e st st e p by m e ans of from the plant simulation software, and 
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are wherein moans for comparing the additional control and command logical program 
g e n e rat e d or m e morized in th e Bool e an ch e ck e r with th e control and command logical program 
during th e t e st st e p by m e ans of plant simulation to notice the identity botwcon the two control 
and command logical programs the additional program and the plant simulation software are 
compared so to verify that the additional program and the plant simulation software are 
identical . 

Claim 16 (currently amended): [[A]] The device according to claim 15, charact e ris e d in 
that wherein the additional program and the plant simulation software each comprise a Boolean 
equation system, -and wherein the additional program and the plant simulation software are 
compared by comparing t he comparison occurs at the Boolean equation system of th e control 
and command logical program gen e rat e d or m e moriz e d in th e Bool e an ch e ck e r and at th e 
control and command logical program the additional program and the plant simulation software 
during the test st e p by m e ans of simulation of th e plant . 

Claim 17 (currently amended): [[A]] The device according to claims 15 or 16, 
charact e ris e d in that the comparison occurs according to t e xt r e ports by m e ans of plant 
simulation of the control and command logical program during th e t e st st e p and of th e additional 
control and command logical program g e n e rat e d and/or m e moriz e d in th e Bool e an ch e ck e r 
m e an s b e ing providod moans fo r . , wherein the additional program and the plant simulation 
software are compared by comparing command and state variables of operating units and relays 
of the virtual relay network* both from the num e ric p e r s p e ctiv e numerically and th e graphic 
p e rspective graphically . 

Claim 18 (currently amended): [[A]] The device according to claim 17, c haract e ris e d in 
that it comprise s further comprising means the for displaying, in a combined way, of graphic 
images of plant state conditions obtained with th e two control and command logical programs 
both the additional program and the plant simulation software . 

Claim 19 (currently amended): f|"A1"| The device according to claim 1 8, charact e ris e d in 

that it compris es further comprising means for displaying, 4nby an overlap-way, plant layout 
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images according to the two control and command logical programs the additional program and 
the plant simulation software, in which wherein the o verlapping of th e plant state condition 
image - highlights t he possible differences are between the plant images generated by the 
additional program and the plant simulation software, and wherein the possible differences are 
graphically highlighted in a visually relevant way. 

Claim 20 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 
claims 15 to 19. characteris e d in that th e claim IS. wherein two different comparison modes 
with a virtual plant are provided in the logical engine, the two different comparison modes 
comprising a first comparison mode having a a t-the Boolean equation system and a second at 
comparison mode having report files of th e t e st of control and command logical programs with 
th e virtual plant ar e e x e cut e d s e qu e ntially , the result of the first comparison mode being a-means 
to identify th e op e rating unit and/or th e plant ar e a and/or th e Bool e an e quation s plant conditions 
wherein a difference has been noticed and it-must be subjected to the second comparison 
ste pmode . 

Claim 21 (currently amended): [[A]] The device according to claim 20, charact e rised in 
that th e comparison wherein a comparison relevant to plant conditions obtained by the two 
control and command logical programs different comparison modes is firstly executed* and 
ther e fore wherein it is identified on which parts of the program the comparison actions can be 
limited with regard to within the Boolean equation system , in order to determine possibl e where 
actions are possible to correct the program sam e or th e d e bugging . 

Claim 22 (currently amended): [[A]] The device according to on e or mor e of th e pr e ceding 
claims 15 to 2 1 T charact e ris e d in that th e Bool e an ch e ck e r analys e s, basin g claim 15. wherein the 
validation and certification system is capable of analyzing, based on diversity, eveft logical 
programs for simulating one or more of a t he single operating units and/or the unit, a plant areas 
and/e r area, the entire plant and/or th e and a logical programs program for simulating r e lays or 
a relay network^ and wherein the validation and certification system is capable of extending sueh 
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ch e ck action the analyzing, based on the diversity, of th e generating program even to programs 
for graphically representing one or more of an operating units or r e lays unit and a relay . 

Claim 23 (currently amended): [[A]] The device according to on e or mor e of th e pr e ceding 
claims, charact e ris e d in that it compris e s claim 1, further comprising a network interface^ 
wherein the device- and4t mav constitut e comprises a non-vital node of the railway plant, b e ing a 
and wherein the device further comprises means for quickly modifying the control and 
command logical program and for virtually validating the same , for instanc e in cas e of a 
structural modification of th e plant by e liminating or adding plant e l e m e nts . 

Claim 24 (currently amended): [[A]] The device according to claim 23, charact e ris e d in 
that said wherein the device , alternatively or in conjunction, is is capable of operating as a 
diagnostic e r and supervisory tool of the correct proper operation of the r e al s tation plant, and 
wherein the device reproduces a simulated plant simulating the actual plant in a desired state 
condition, being provid e d t he device farther comprising a comparator between the state 
condition that has b ee n assumed by the feal-plant and the one that has boon state condition 
assumed by the simulated plant. 

Claim 25 (currently amended): [[A]] The device according to claims 23 or 21, 
characterized in that it is claim 23, wherein the device fe f is capable of simulating emergency 
interventions before their application applications to the feal-plant, and wherein in the- an 
emergency event- situation bemg it is possible to simulate several intervention or- and command 
possibilities of th e plant to e x e cut e be executed on the plant* 4tse tf thereby indicating the 
optimal choice 4he among the possibl e choic e s th e on e that is th e b e st solution intervention and 
command possibilities . 

Claim 26 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 

claims, charact e ris e d in that it compris e s claim l, further comprising t ools for executing 

simulating functions with a user interface of the type used by th e Window s ® program soft Inc. 

a desired computer operating system, and th e r e for e it compris e s thereby providing an operator 

with operating windows wkh -having fiinction buttons, quick choice menus and other 
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functionalities typical of said user interface, in addition obviously t o the use o f mous e or of oth e r 
point e rs a pointing system, selection and command input systems* and the-ajceyboard to input 
numerical data, such as to cr e at e or modif yt he operating windows peoviding graphic images of 
operating units a and/or of relays* er-e f and other parts of the plant structur e. 

Claim 27 (currently amended): [[A]] The device according to on e or mor e of th e pr e c e ding 
claims, characterised on that it provid e claim 1. further comprising means for setting specific 
operating conditions of the plant er-ef and anomalous situation s in the plant and further for 
checking the changes in operating conditions in the plant r e actions r e f e rrin g according to several 
different operating e nvironmen t environments . 

Claim 28 (currently amended): [[A]] The device according to claim 27, charact e ris e d in 
tha ^wherein manually setting means are m e an s provided by the p e rsonal to an operator of the 
device, wherein the manually setting means impose, imposing at the starting of the cycle for 
executing control and command logical program signals, specific state conditions to the several 
plurality of operating units, wherein b e ing possibl e to provid e by m e ans of suitabl e sch e duling 
even conditions may be provided wh e r e in t hat cause one or more of the plurality of operating 
units are not op e rating or operate in a anomalous way to operate anomalously, and wherein the 
one or more of the plurality of operating units operate anomalously by operating incorrectly or 
by failing to operate . 

Claim 29 (currently amended): A method for checking a_software logical e ngin e s engine 
for controlling and commanding plants such as railway plants, particularly station plants a plant . 
the method comprising: 

using at least a central processing unit and at least a memory for loading and executing 
programs!!:]]: 

a logical engin e for commanding a the plant with a logical engine, particularly a station 
plant, the logical engine being load e d or loadable in said at least a memory for its- , the execution 
of the logical engine, the logical engine providing command and control signals; !!/!! 
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receiving command signals and transmitting control signals related to the operating 
conditions which plant comprises of a plurality of actuating and/or det e ction and/or 
m e asur e m e nt and/or signalling ^ operating units situated in the plant the plurality of operating 
units being capable of actuating, detecting, measuring, and signaling: , so call e d waysid e 
e quipm e nts, which units ar e provid e d for r e c e iving command signals and transmitting control 
signals as regards th e op e rating condition, 

and which logical softwar e e ngin e r e ads reading with the logical engine the control signals 
given - provided by the actuating and/or d e t e ction and/or m e asur e m e nt and/or signalling 
plurality of operating unitsiand 

it process e s processing the command signals of said plurality of operating units basing on 
according to an operating protocol of the syst e m its e l f plant 

charact e ris e d in that 

wherein in th e comput e r memory a plant simulation software program for softwar e 
simulating th e plant that must b e is controlled and commanded by the control and command 
logical program logical engine is load e d or loadable in the at least a memory, and it 

wherein the plant simulation software is designed to-ean be executed by the comput e r itself 
at least a central processing unit and 

wherein which simulatin g the plant simulation software program r e produc es e xactly 
simulates accurately t he plant structure and the operating modes of the plurality of operating 
units provided in said plant. 

Claim 30 (currently amended): [[A]] The method according to claim 29, charact e ri se d in 

that th e simulation of th e plant structur e and of th e op e rating units associat e d th e r e to, s uch a s 

track circuits to not e th e train pr e sence, switch point s actuators, signalling actuators and oth e r 

diff e rent units is represented in th e simulating program by wherein the plant simulation 

software comprises Boolean algorithms including variables, and wherein the variables 
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associat e d to said algorithms b e ing j ire_uni vocally defined to represent control signals of various 
stat e or op e ration different state and operating conditions of various the plurality of operating 
units and commutation as well as command signals for commutating and maintaining the 
different o f state e r and operating conditions of said various the plurality of operating units 
and/or th e maint e nanc e th e r e of . 

Claim 31 (currently amended): [[A]] The method according to claims 29 or 30, 
charact e ris e d in that th e claim 29, wherein an image of th e behaviour a simulated behavior of the 
virtual plant under the control of the control and command logical engine program is displayed 
as variables list univocally associated to various the plurality of operating units as report files a 
and wherein variou s the plurality of operating units and the associat e d state e r and command 
variables associated with the plurality of operating units are listed. 

Claim 32 (currently amended): [[A]] The method according to on e or mor e of th e 
preceding claims 29 to 31. oharaotorisod in that it provid e s th e s e tting by th e claim 29. wherein 
a_user is capable of setting the of starting operating conditions of the plant at start-up, a nd/er 
oven anomalous and wherein the user is further capable of setting specific conditions situations 
of plant the plurality of operating units, to ch e ck thereby verifying the reaction of the plant to 
these - the set conditions. 

Claim 33 (currently amended): [[A]] The method according to on e or mor e of the 
preceding claims 29 to 32, charact e ris e d in that claim 29, 

wherein a virtual image of the - one of the plurality of operating unit and/or th e and of a 
plant structural element can be univocally associated to eaeh -the plant operating unit and/or to 
each r e l e vant and the plant structural element* 

wherein the virtual whioh image is generated by a graphic program load e d or loadable 
and/or- and executable by the comput e r central processing unit, and which wherein the virtual 
image is univocally correlated to the simulating logical engine: program of th e op e rating unit or 
of the plant structural e l e m e nt 
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wherein the graphic program for gen e rating th e virtual imag e of e ach op e rating unit b e ing 
such to g e n e rat e is capable of generating several graphic aspect conditions of graphic asp e cts of 
one or more of the plurality of operating wri t units, and 

wherein each of the m the plurality of operating units is univocally correlated to a 
predetermined value of voriabl e s a variable relative to the operating condition of the operating 
unit and/or commutation or maint e nanc e command and of a variable variabl e s related to e f the 
operating state of the operating unit-kself 

Claim 34 (currently amended): [[A]] The method according to claim 33, charact e ris e d in 
that - wherein the operation of the control and command logical program engine is furth e r 
capable of being represented in parallel or alt e rnativ e ly and in the alternate as b e haviour of the 
e quival e nt command hardwar e logio compos e d of a relay network, and wherein b e ing provided a 
simulating program of retevs relay operation and a simulating program of relay network 
operation are provided, as well as graphic programs for representing relays univocally associated 
to eaeh- the relay simulation program and the relay n e twork graphic r e pr e s e ntation program. 

Claim 35 (currently amended): [[A]] The method according to claim 34, charact e ris e d in 
that- wherein the plant comprises relays that are capable of receiving commutation commands, 
wherein each relay is simulated by a Boolean logical program of Bool e an typ e, wherein 
individual state conditions of the relays and/e f and of the commutation commands-being are 
represented by state er and command variables! and wherein g raphic programs being such to 
associate s e v e ral different graphic aspee ^aspects of the relays univocally correlat e d to with 
values assumed by said state of - and command variables. 

Claim 36 (currently amended): [[A]] The method according to on e or mor e of th e 

prec e ding claims, charact e ris e d in that claim 34, further comprising the step of displaying the 

display of the functional b e haviour behavior of the plan t wherein the display of the functional 

behavior of the plant is executed according to two modes , the two modes comprising a first 

mode having and i. e . in th e shap e of a report file that displays values of state variables generated 

by th e programs proc e ssed by the plant simulation software logical program s of op e rating units , 
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and a second mode having in th e shap e of a graphic representation of the operating condition of 
plurality of o perating units , thereby enabling a user allowing to check in detail s detail the 
plurality of operating units* of th e plant and therefore the physical operation modes thereof both 
in an analytic way and in a direct visual way of th e physical op e ration condition . 

Claim 37 (currently amended): [[A]] The method according to on e or mor e of th e 
pr e c e ding claims, charact e ris e d on that it provid e means for claim 36. further comprising the 
capability of setting specific operating conditions of the plant* er-ef anomalous situations in the 
plant and for ch e cking the plant reactions ref e rrin g according to several operating environment. 

Claim 38 (currently amended): [[A]] The method according to claim 37, charact e rised in 
that s e ttings can b e e x e cut e d bv th e p e rsonal imposing wherein the capability of setting can be 
implemented at the startin g a specific step of the plant simulation softare. t h e cycle for e xecuting 
th e control and command logical program sp e cific stat e conditions to th e s e v e ral op e rating units, 
bew ^wherein it is possible to provide by m e ans o f by a suitable scheduling even conditions 
wherein one or more the plurality of operating units are not op e rating or op e rat e in a anomalous 
wa y operating anomalously, and wherein the one or more of the plurality of operating units 
operate anomalously by operating incorrectly or by failing to operate . 

Claim 39 (currently amended): [[A]] The method according to claim 37, charact e ris e d in 
that it provid e s th e further comprising the step of scheduling and th e configuration configuring 
e£images and/or - and state and command variables of virtual operating units corresponding to 
the desired or corr e ct op e ration or operational and state condition conditions of the plant 4ft 
conjunction with and a predetermined situation of operation^ and the step of executing a t he 
e x e cution of the direct and visual check of correct operation as w e ll as th e e x e cution of and an 
automatic check based on the comparison between the- a nominal image and athe nominal table 
of list of desired state and command variables, pr e viously sch e dul e d and the image and state and 
command variables really processed during the operation of the control and command logic 
logical engine with th e station plant virtual model , an error message being sent in case of non- 
identity. 
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Claim 40 (currently amended): [[A]] The method according to claim 39, charact e ris e d in 
that - wherein the automatic check provides is capable of providing a g raphic and/or and 
analytical analytic display of the operating unit that has assumed a non-correct conditio^ and of 
providing the corresponding state of- and command variabl e or variable s, and the and/or graphic 
and/e r and analytic display of state variables of the simulated relay network simulat e d . 

Claim 41 (currently amended): [[A]] The method according to one or moro of tho 
preceding claims 9 to 4 0. charact e rised in that it provid e s claim 39, further comprising the step 
of providing automatic tools for correcting the control and command logical program d e p e nding 
e ft logical engine according to possible corrections made by the user to the state of - and 
command variables , the state and command variables being manually modified in th e presence 
because of a state of- and command error of one or more of a virtual operating unit of - and of a 
relay in the corr e sponding command logic circuit constitut e d by within a virtual model of t he 
relay network virtual mod e l . 

Claim 42 (currently amended): [[A]] The method according to claim 41, charact e rised in 
that it provid e s th e e x e cution of wherein modification interventions both of alphanum e ric type 
can be executed both of alphanumeric type on report files of state of- and command variables, of 
and of g raphic int e rv e ntions for modifying th e asp e ct o f type on the operating unit or of and the 
relay , the graphic interventions corresponding corr e sponding to the state of said operating unit 
o r and e£said relay a said data b e ing int e rpr e t e d said alphanumeric and graphic interventions 
being performed by a correction program that analys e s analyzes state of - and command 
variables values that are manually set to correct thos e wron g undesired values , and that further 
analyzes analys e s th e control and command logical program the logical engine and modifies the 
eeteur logical engine's code to oommutat e commute the operating unit o f and the relay mto the 
corr e ct desired state conditions oondition with th e sam e op e ration when an operating condition 
occurs in pr ese nc e o f due to which the control and command logical program logical engine had 
pr e viou s ly generated thean error. 
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Claim 43 (currently amended): [[A]] The method according to on e or mor e of th e 
pr e c e ding claims. charaoteriG e d in that it provides claim 39, farther comprising the step of 
providing a Boolean simulation program simulating plant operations, wherein the read in of 
areas of the virtual station simulated plant operations and the corresponding parts of the control 
and command logical program having logical engine comprise typical plant structures that recur 
in various several station plants, so to be able t o load and reuse both the Boolean simulation 
programs program, and a related g raphic display programs program, as w e ll as and parts of the 
control and command logical program engine in new station plants having equal station 
areas operations . 

Claim 44 (currently amended): [[A]] The method according to on e or mor e of the 
prec e ding claims, characterised in that it provid e s claim 39, further comprising the step of 
providing t he an alternative or and a parallel execution of a check of the command and control 
logical program engine during the-atest step with the plant simulator simulation software, 
wherein the alternative and the parallel execution comprise bv m e ans of using a Boolean checker 
that generates with div e rsity principl e s, or wh e r e in is m e moriz e d, employs a control and 
command logical program generated with diversity principles and that compares the control and 
command logical engine p rogram during the test step by m e an s of virtual plant simulation with 
the on e command and control logical program generated with diversity crit e rions principles . 

Claim 45 (currently amended): [[A]] The method according to claim 44, charact e ris e d in 
that it provid e s a furth e r program for further comprising the step of providing an additional 
program for g enerating the control and command instructions program obj e ct of related to the 
test ster^ hy m e ans of plant simulation, which g e n e ratin g wherein the additional program 
operates according to a code different from that with which has been g e n e rat e d th e control and 
command logical program during the t e st by m e ans of virtual plant of the plant simulation 
software, wherein t he two control and command logical programs additional program and the 
plant simulation software each comprise a Boolean equation system, and wherein the additional 
program and the plant simulation software are being compared by the Boolean checker to 
identify difference in the Boolean equation syst e m systems . 
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Claim 46 (currently amended): [[A]] The method according to claim 4 1, charact e ris e d in 
thnt in addition or alt e rnatively 45, wherein t he control and command logical program g e n e rat e 
by the checker or m e morized therein is subjected to a-the test step by m e ans ofj isin&a virtual 
plant, being compared and wherein t he results obtained by the twe-control and command logical 
programs program and the plant simulation software are compared . 

Claim 47 (currently amended): [[A]] The method according to one or more of claims 11 to 
Af * nhnmrtfiria ft H in thnt it provid e s th e claim 46. further comprising the capa b ility of providing a 
display, both in the shape of comparative tables of variables and in the shape of graphic 
comparisons, of the op e ration operational d ifferences e £ between the twe-control and command 
logical programs program and the plant simulation software, the operational differ e nces being 
generated according to diversity criterions 4 and/ar and of operational differences between the 
twe-relay networks corresponding that correspond to the two Boolean equation systems, b e ing 
highlighted the variables and the graphic state s comparisons r e sp e ctiv e ly being highlighted that 
which are different one with r e spect to the other both 4ft within the comparative tables v ariable 
compari s on and m within the graphic comparison comparisons . 

Claim 48 (currently amended): [[A]] The method according to claim 47, characterised in 
that it provides the further comprising the step of providing an overlap of graphic images of the 
plant state conditions obtained by the two control and command logical programs program and 
bv the plant simulation software , b e ing graphically highlight e d t he possibl e differences in this 
the overlap of the graphic images m age of the plant state condition being graphically 
highlighted . 

Claim 49 (currently amended): [[A]] The method according to on e or more of claims 11 to 
A9 eharaeterised in that it provid e th e e x e cution claim 48, wherein the two modes fo r displaying 
the functional behavior of the plant can be executed in alternative or and in sequence turn of the 
two mod es for comparin g , wherein the two control and command logical programs program and 
the plant simulation software are compared at the Boolean equation system level and at the 
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result of the test e xecution on the simulated virtual plant step, and wherein being also possibl e 
to modify t he sequence order of the two differ e nt comparison modes is capable of modification . 

Claim 50 (currently amended): [[A]] The method according to claim 49, charact e ris e d in 
thnt it provider , tho following comparison st e ps wherein the control and command logical 
program and the plant simulation software are compared with comparison steps comprising : 

Firstly executing the - a first comparison in relation to the-plant conditions obtained by the 
twe-control and command logical programs program and the plant simulation software : 

Basing on said comparison identifyin g, in the basis of the first comparison, on which parts 
of the control and command logical program and of the plant simulation software t he-subsequent 
comparison actions can be limited; 

Rxecuting th e executing a second comparison in relation to the Boolean equations of the 
twe-control and command logical programs program and of the plant simulation software. e ftW 
fer -the second comparison being limited to the equations that caused the functional divergences 
that have b ee n were found in the first comparison-step; 

th e r e for e executing the possible corr e ction corrective actions thereof or th e d e bugging 
inquir e s ( and error det e ction^ detections on sak khe Boolean equations identified as responsible 
for the different behaviour divergent behavior of the plant. 

Claim 51 (currently amended): [[A]] The method according to one or mor e of th e 
prawning claimr , 44 to 5Q T charact e ris e d in that claim 50. wherein t ho actions for th e 
comparison the first and second comparisons are executed with a program generated according 
to a different gen e rating code , wherein the capability is provided of executing additional 
comparison steps afe-e %eetrted fltoo in r e lation to logical programs fo r related to the simulation 
and the graphic representation of simulating th e individual operating units a and-the plant 
structure^ , as well as at logical programs for simulating and the relays and therelay networked 
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in cas e such ch e ck action may be also e xtend e d to th e graphio r e pr e s e ntation programs of the 
op e rating units or of r e lays . 

Claim 52 (currently amended): [[A]] The method according to on e or mor e of th e 
pr e c e ding claims 44 to 51. charact e ris e d in that it compris e s claim 50. farther comprising the 
step of certifying the plant simulation software with p arallel means a for certificating th e control 
and command logical program consisting in the parallel means comprising an additional a 
furth e r independent program that executes in parallel the test of the same-Booleans equation 
system constituting th e control and command logioal comprised in the plant simulation 
program software. to e x e cut e thereby executing a double test by m e ans of th e railway 
performing a plant simulation, the b e haviour behavior of the simulated plant obtained und e r th e 
control of th e control and command logioal with the plant simulation p rogram software in the 
two separated and parallel ch e ck t e sts test steps being compared^ and one or more of alert and o r 
error files being generated in case of a discrepancy diff e r e nc e. 

Claim 53 (currently amended): [[A]] The method according to on e or mor e of th e 
pr e c e ding claims 44 to 52. charact e ris e d in that it oompris e s a claim 45, further comprising the 
step f&* of creating an operating connection to d e vic e s remote operating units or - and remote 
networks, so to be able to command the-test functions fern - from a remote workstation and/or 
and to execute alternative functions as functions of _ajion vital node of railway the plant. 

Claim 54 (currently amended): [[A]] The method according to claim 53, charact e ris e d in 
that it is us e d further comprising the step of for a modification to updat e updating the plant 
simulation software a control and command logical program and for th e virtual functional test 
thereef the test steps in case of a_structural modification of the plant. 

Claim 55 (currently amended): [[A]] The method according to claims 51 to 54, 

charact e ris e d in that it is us e d claim 53, further comprising the step for th e sup e rvision or the 

diagnostic of supervising and diagnosing t he correct operation of the real station plant[[,]] by 

executing a comparison between the state condition conditions assumed by the real-plant and 

that- the state conditions assumed by the simulated plant. 
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Claim 56 (currently amended): [[A]] The method according to one or mor e of th e 
preceding claims 50 to 55, charact e ris e d in that it is us e d claim 53, further comprising the step 
of simulating a s a virtual emergency simulator for intervention er - and command possibility of 
th e r e at on the plant -te -therebv implementing r ealize on the plant its e lf only the choice that 
offers the best - optimal solution under an emergency condition among the possible choices. 

Claim 57 (currently amended): [[A]] The method according to on e or mor e of th e 
preceding claims 20 to 55, charact e ris e d in that it compris e s a program for claim 29. further 
comprising the step of executing simulation functions with an user interface o f th e type us e d by 
Windows ® program by Microsoft Inc. an operating system displaying and h e nc e comprising 
operating windows with function buttons, quick choice menus and other fiinctionalities-typieal 
of said int e rfac e within the operating windows, in addition obviously to th e us e of th e mous e or 
further comprising the capability of using of oth e r pointing means, s e l e ction and inputting of 
commands and the_a keyboard to input numerical, alphanumerical data, aftd/e r and numerical or 
and alphanumerical commands, such as also thereby creating and modifying to cr e at e or modify 
graphic images of operating units ^ and/or of relays^efr-efand other parts of the plant structure. 

Claim 58 (currently amended): A computer-readable medium of instructions program for a 
comput e r , the computer-readable medium of instructions being capable of verifying provid e d to 
verify a logical program for controlling and commanding a plant, particularly railway plant by 
the computer-readable medium of instructions further having application means of application 
on a simulated railway plan plant the computer-readable medium of instructions comprising: 
that is provid e d to e xecut e th e method steps according to on e or mor e of th e pr e c e ding claims 29 
to 57 or to b e load e d in the computer to form a d e vic e according on e or mor e of th e pr e c e ding 
claims 1 to 2 8 . 

at least a central processing unit and at least a memory for loading and executing 
programslT:11: 
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means for commanding the plant with a logical engine, the logical engine being loadable 
in the at least a memory for the execution of the logical engine, the logical engine farther 
providing command and control signals: 

means for receiving command signals and transmitting control signals related to the 
operating condition of a plurality of operating units situated in the plant the plurality of 
operating units being capable of actuating, detecting, measuring, and signaling; 

means for reading with the logical engine the control signals provided by the plurality of 
operating units: and 

means for processing the command signals of the plurality of operating units according to 
an operating protocol of the plant 

wherein a plant simulation software that is controlled and commanded by the logical 
engine is loadable in the at least a memory, 

wherein the plant simulation software is capable of being executed by the at least a central 
processing unit and 

wherein the plant simulation software simulates accurately the plant structure and the 
operating modes of the plurality of operating units provided in the plant. 
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